Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

7374435a04...18.exe

windows7-x64

7

7374435a04...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    26/07/2024, 09:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    7374435a04cc3890027848b2466af661_JaffaCakes118.exe

  • Size

    470KB

  • MD5

    7374435a04cc3890027848b2466af661

  • SHA1

    ab1535ca61375bc145cc7ba7f5a9a3b4879991d3

  • SHA256

    061c7819b24d861b8baecb344720df15076bda53df4c3c02c5dab8a6588f860f

  • SHA512

    6d10e7874cdfb8d81ba7b2241a1354f4a63280c2b55f258f7ccd8b320776c80dd10cd1a9d0c6a318131fe894bd68fe81f362a395e0f9938d6466d80afcf0c79f

  • SSDEEP

    6144:K4pVJx3Zq0OY1G2Siwm7rHubEvQMZ60EeVVTVK4ZnoIBg6S3/O5sPIX:TvJqQ42qJlMZPEoTVKInu6S3m5s6

Score
7/10
discoveryupx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\7374435a04cc3890027848b2466af661_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\7374435a04cc3890027848b2466af661_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1108

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1108-0-0x0000000000400000-0x0000000000476000-memory.dmp

    Filesize

    472KB

    Download

  • memory/1108-1-0x0000000000400000-0x0000000000476000-memory.dmp

    Filesize

    472KB

    Download